Open Bug 1570724 Opened 1 year ago Updated 1 month ago

Add GlobalSign Root Certificates R46/E46

Categories

(NSS :: CA Certificate Root Program, task)

task
Not set

Tracking

(Not tracked)

ASSIGNED

People

(Reporter: julie.olson, Assigned: kwilson)

Details

(Whiteboard: [ca-verifying] - KW 2019-09-19 - Comment #2)

Attachments

(4 files)

38.15 KB, application/vnd.openxmlformats-officedocument.spreadsheetml.sheet
Details
25.82 KB, application/vnd.openxmlformats-officedocument.wordprocessingml.document
Details
175.35 KB, image/png
Details
166.94 KB, image/png
Details

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:68.0) Gecko/20100101 Firefox/68.0

Steps to reproduce:

GlobalSign would like to add two new roots to NSS/Mozilla Root Store. Self-assessment checklist, and a copy of the details provided to CCADB are attached to this bug report.

Status: UNCONFIRMED → ASSIGNED
Ever confirmed: true

The link below shows the CA information that has been verified. Search in the page for the word "NEED" to see where further clarification is requested.

https://ccadb-public.secure.force.com/mozilla/PrintViewForCase?CaseNumber=00000469

In particular, for each root:

  1. Provide 3 test websites (valid, expired, revoked) whose EV TLS cert chains up to the root and works as expected. Currently the provided test websites are timing out. You can also see this here: https://crt.sh/test-websites
    Then perform testing when the EV test websites are available
    a) Test with http://certificate.revocationcheck.com/ make sure there aren't any errors.
    b) Perform lint testing for the certs in the CA hierarchy.
    c) Provide successful output from EV Testing as described here https://wiki.mozilla.org/PSM:EV_Testing_Easy_Version

  2. Add records for the existing intermediate certs to the CCADB as described here:
    https://ccadb.org/cas/intermediates#adding-intermediate-certificate-data

Whiteboard: [ca-verifying] - KW 2019-09-19 - Comment #2
Type: enhancement → task

Hi Kathleen,

I have gone through the "NEED"s of the above linked case and your comment and have addressed all of them:

Please let me know if you need anything else. Thanks!
Julie.

Attached image E46 EV check.png
Attached image R46 EV check.png
You need to log in before you can comment on or make changes to this bug.